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Foreword 



id , 



This Technical Specification has been produced by the 3 Generation Partnership Project (3GPP). 

The contents of the present document are subject to continuing work within the TSG and may change following formal 
TSG approval. Should the TSG modify the contents of the present document, it will be re-released by the TSG with an 
identifying change of release date and an increase in version number as follows: 

Version x.y.z 

where: 

x the first digit: 

1 presented to TSG for information; 

2 presented to TSG for approval; 

3 or greater indicates TSG approved document under change control. 

y the second digit is incremented for all changes of substance, i.e. technical enhancements, corrections, 
updates, etc. 

z the third digit is incremented when editorial only changes have been incorporated in the document. 
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Scope 



The present document describes the Sv interface between the Mobility Management Entity (MME) or Serving GPRS 
Support Node (SGSN) and 3GPP MSC server enhanced for SRVCC. Sv interface is used to support Inter-RAT 
handover from VoIP/IMS over EPS to CS domain over 3GPP UTRAN/GERAN access or from UTRAN (HSPA) to 
3GPP UTRAN/GERAN access. 

If there is no specific indication, the term "MSC server" denotes 3GPP MSC server enhanced for SRVCC as defined in 
3GPPTS 23.216 [2]. 



2 References 

The following documents contain provisions which, through reference in this text, constitute provisions of the present 
document. 

• References are either specific (identified by date of publication, edition number, version number, etc.) or 
non-specific. 

• For a specific reference, subsequent revisions do not apply. 

• For a non-specific reference, the latest version applies. In the case of a reference to a 3GPP document (including 
a GSM document), a non-specific reference implicitly refers to the latest version of that document in the same 
Release as the present document. 

[I] 3GPP TR 21.905: "Vocabulary for 3GPP Specifications". 

[2] 3GPP TR 23.216: "Single Radio Voice Call Continuity (SRVCC)". 

[3] 3GPP TS 29.274: "Evolved GPRS Tunnelling Protocol for Control Plane (GTPv2-C)" . 

[4] 3GPP TS 23.003: "Numbering, addressing and identification". 

[5] 3GPP TS 23.007: "Restoration Procedures". 

[6] 3GPP TS 33.401 : "3GPP System Architecture Evolution (SAE): Security architecture". 

[7] 3GPP TS 24.008: "Mobile radio interface Layer 3 specification; Core network protocols; Stage 3". 

[8] 3GPP TS 48.008: "Mobile Switching Centre - Base Station System (MSC - BSS) interface; Layer 

3 specification". 

[9] 3GPP TS 25.413: "UTRAN Iu interface Radio Access Network Application Part (RANAP) 

signalling". 

[10] 3GPP TS 33.102: "3G Security; Security architecture". 

[II] 3GPP TS 29.002: "Mobile Application Part (MAP) specification; Stage 3". 
[12] 3GPP TS 24.301: "Non-Access-Stratum (NAS) protocol for Evolved Packet". 

3 Definitions, symbols and abbreviations 
3.1 Definitions 

For the purposes of the present document, the terms and definitions given in 3GPP TR 21.905 [1] and the following 
apply. A term defined in the present document takes precedence over the definition of the same term, if any, in 3GPP 
TR 21.905 [1]. 
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3.2 Symbols 



For the purposes of the present document, the following symbols apply: 



3.3 



Abbreviations 



For the purposes of the present document, the abbreviations given in 3GPP TR 21.905 [1] and the following apply. An 
abbreviation defined in the present document takes precedence over the definition of the same abbreviation, if any, in 
3GPP TR 21.905 [1]. 

STN-SR Session Transfer Number for SRVCC: see 3GPP TS 23.003 [4]. 

MME/SGSN MME or SGSN. 
C-MSISDN Correlation MSISDN. 



General Description 



This document describes the Sv interface related procedures, message parameters and protocol specifications. The Sv 
messages are based on GTP. The message format, IE coding, and protocol error handling for Sv is per GTP as specified 
in3GPPTS29.274[3]. 

The general rules for IP address and UDP port number handling for the GTP messages on the Sv interface is per 3GPP 
TS 29.274 [3]. 



Sv Messages and Information Elements 



5.1 



Introduction 



The Sv application defines a set of messages between the MME/SGSN and MSC Server to provide SRVCC as defined 
in 3GPP TS 23.216 [2]. The Sv message header is defined in 3GPP TS 29.274 [3]. The messages to be used and the 
information elements are described in the following sections. 

5.2 Sv Messages 
5.2.1 General 

Sv Message Type value is defined in 3GPP TS 29.274 [3]. The message format is coded as per GTP in 3GPP TS 29.274 
[3]. 

Table 5.2.1 : Message types for Sv interface 



Message Type 
value (Decimal) 


Message 


Reference 





Reserved 


3GPP TS 29.274 [3] 


1 


Echo Request 


3GPP TS 29.274 [3] 


2 


Echo Response 


3GPP TS 29.274 [3] 


3 


Version Not Supported Indication 


3GPP TS 29.274 [3] 


4-24 


Reserved for S1 01 interface 


3GPP TS 29.274 [3] 


25 


SRVCC PS to CS Request 


5.2.2 


26 


SRVCC PS to CS Response 


5.2.3 


27 


SRVCC PS to CS Complete Notification 


5.2.4 


28 


SRVCC PS to CS Complete Acknowledge 


5.2.5 


29 


SRVCC PS to CS Cancel Notification 


5.2.6 


30 


SRVCC PS to CS Cancel Acknowledge 


5.2.7 


31 


For future Sv interface use 


- 


32-255 


Reserved for GTPv2 


3GPP TS 29.274 [3] 
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The GTPv2-C messages shall be sent per UE on the Sv interface. 

There shall be one pair of TEID-C per UE on the Sv interface. The same tunnel shall be shared for the control messages 
related to the same UE operation. 

The TEID field in the SRVCC PS to CS Request message header shall be set to "0" because this is the first message the 
the MME/SGSN sends to the MSC server to establish the tunnel for a UE. 

The TEID field in the SRVCC PS to CS Cancel Notification message header shall be set to "0" if the message is sent 
before reception of the acceptance response to the SRVCC PS to CS Request. If the MME/SGSN sends the SRVCC PS 
to CS Cancel Notification message after the acceptance response to the SRVCC PS to CS Request, the TEID field of the 
SRVCC PS to CS Cancel Notification message may be set to the MSC Server's TEID value received in the SRVCC PS 
to CS Response message. Therefore the MSC Server shall be able to accept the SRVCC PS to CS Cancel Notification 
messages with "0" or non-zero TEID in the message header. 

5.2.2 SRVCC PS to CS Request 

A SRVCC PS to CS Request message shall be sent across Sv interface from the MME/SGSN to the target MSC server 
as part of the MME/SGSN SRVCC procedure in 3GPP TS 23.216 [2]. 

Table 5.2.2 specifies the presence requirements and conditions of the IEs in the message. 

Table 5.2.2: Information Elements in a SRVCC PS to CS Request 



Information 
elements 


P 


Condition / Comment 


IE Type 


Ins. 


IMSI 


M 


None 


IMSI 





MME/SGSN Sv 
Address for Control 
Plane 


M 


This IE specifies the address for control plane message 
which is chosen by the source MME/SGSN 


IP-Address 





MME/SGSN Sv TEID 
for Control Plane 


M 


This IE specifies the tunnel for control plane message 
which is chosen by the source MME/SGSN. The target MM 
shall include this TEID in the GTP header of all related 
control plane messages which are related to the requested 
bearer. 


TEID-C 





C-MSISDN 


M 


The MME/SGSN shall include C-MSISDN IE. 
The C-MSISDN is defined in 3GPP TS 23.003 [4]. 


MSISDN 





STN-SR 


M 


The MME/SGSN shall include STN-SR IE 


STN-SR 





MM Context for E- 
UTRAN SRVCC 


C 


The MME shall include mobile station classmarks, 
supported codecs, and CS Security key in MM Context for 
SRVCC for E-UTRAN SRVCC. 
The derivation of the CS security keys shall follow the 
procedures defined 3GPP TS 33.401 [7]. 


MM Context for E- 
UTRAN SRVCC 





MM Context for 
UTRAN SRVCC 


C 


The SGSN shall include mobile station classmarks, 
supported codecs, and CS Security key in MM Context for 
SRVCC for UTRAN (HSPA) SRVCC. 
The derivation of the CS security keys shall follow the 
procedures defined 3GPP TS 33.1 02[Z]. 


MM Context for 
UTRAN SRVCC 





Source to Target 

Transparent 

Container 


M 


The MME or SGSN shall include Source to Target 
Transparent Container IE 


Source to Target 
Transparant 
Container IE 





Target RNC ID 


C 


This IE shall be used to identify the target access for 
SRVCC handover to UTRAN (note 1). 


Target RNC ID 





Target Cell ID 


C 


This IE shall be used to identify the target access for 
SRVCC handover to GERAN (note 1). 


Target Global Cell 
ID 





Private Extension 


O 


None 


Private Extension 


vs 


NOTE1 : Based upon the SRVCC Handover procedure, either Target RNC ID or Target Cell ID shall be 
present in this message 



5.2.3 SRVCC PS to CS Response 

A SRVCC PS to CS Response message shall be sent across Sv interface as a response to SRVCC PS to CS Request by 
the MSC server during SRVCC procedure in 3GPP TS 23.216 [2]. 
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Table 5.2.3 specifies the presence requirements and conditions of the IEs in the message. 

Cause IE indicates if the SRVCC PS to CS request has been accepted, or not. The request has not been accepted by the 
target MSC server if the Cause IE value differs from "Request accepted". 

Table 5.2.3: Information Elements in a SRVCC PS to CS Response 



Information 
elements 


P 


Condition / Comment 


IE Type 


Ins. 


Cause 


M 




Cause 





SRVCC rejected 
Cause 


O 


This IE may be sent if Cause value is differs from "Request 

accepted". 

MSC Server may include additional information to indicate 

the reason for rejecting SRVCC PS to CS request 


SRVCC Cause 





MSC Server Sv 
Address for Control 
Plane 


O 


If the Cause IE contains the value" Request accepted", the 
target MSC server may include MSC server Sv Address for 
Control Plane IE in SRVCC PS to CS Response message 
if target MSC Server decides to use different IP address for 
the subsequent communication. The source MME/SGSN 
shall store this MSC server address and use it when 
sending subsequent control plane messages to this GTP-C 
tunnel. 


IP Address 





MSC Server SvTE ID 
for Control Plane 


c 


The target MSC server shall include MSC server Sv 
Tunnel Endpoint Identifier for Control Plane IE in SRVCC 
PS to CS Response message if the Cause IE contains the 
value "Request accepted". The source MME/SGSN shall 
include this TEID-C in the GTP-C header of all subsequent 
uplink control plane messages from the source 
MME/SGSN to the target MSC servers. 


TEID-C 





Target to Source 

Transparent 

Container 


c 


If the Cause IE contains the value "Request accepted ", 
this IE is included to carry the Handover command from 
the target access network. 


Target to Source 
Transparant 
Container IE 





Private Extension 





None 


Private Extension 


vs 



5.2.4 SRVCC PS to CS Complete Notification 

A SRVCC PS to CS Complete Notification message shall be sent across Sv interface to the source MME/SGSN to 
indicate the SRVCC handover with CS Domain has been successfully finished during SRVCC procedure in 3GPP TS 
23.216 [2]. 

Table 5.2.4 specifies the presence requirements and conditions of the IEs in the message. 

Table 5.2.4: Information Elements in a SRVCC PS to CS Complete Notification 



Information 
elements 


P 


Condition / Comment 


IE Type 


Ins. 


IMSI 


M 


None 


IMSI 





Private Extension 


O 


None 


Private Extension 


VS 



5.2.5 SRVCC PS to CS Complete Acknowledge 

A SRVCC PS to CS Complete Acknowledge message shall be sent across Sv interface as a response to SRVCC PS to 
CS Complete Notification during SRVCC handover with CS Domain in 3GPP TS 23.216 [2]. 

Table 5.2.5 specifies the presence requirements and conditions of the IEs in the message. 

Table 5.2.5: Information Elements in a SRVCC PS to CS Complete Acknowledge 



Information 
elements 


P 


Condition / Comment 


IE Type 


Ins. 


Cause 


M 


None 


Cause 





Private Extension 


O 


None 


Private Extension 


VS 
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5.2.6 SRVCC PS to CS Cancel Notification 

A SRVCC PS to CS Cancel Notification message shall be sent across Sv interface from the MME/SGSN to the target 
MSC server to request the cancellation of an ongoing SRVCC handover. 

Table 5.2.6 specifies the presence requirements and conditions of the IEs in the message. 

Table 5.2.6: Information Elements in a SRVCC PS to CS Cancel Notification 



Information 
elements 


P 


Condition / Comment 


IE Type 


Ins. 


IMSI 


M 


None 


IMSI 





Cancel Cause 


M 


MME/SGSN indicates the reason for Handover 
cancellation 


SRVCC Cause 





Private Extension 


O 


None 


Private Extension 


vs 



5.2.7 SRVCC PS to CS Cancel Acknowledge 

A SRVCC PS to CS Cancel Acknowledge message shall be sent across Sv interface as a response to SRVCC PS to CS 
Cancel Notification. 

Table 5.2.7 specifies the presence requirements and conditions of the IEs in the message. 

Table 5.2.7: Information Elements in a SRVCC PS to CS Cancel Acknowledge 



Information 
elements 


P 


Condition / Comment 


IE Type 


Ins. 


Cause 


M 


None 


Cause 





Private Extension 


O 


None 


Private Extension 


VS 



5.3 Path Management Messages 



5.3.1 



Introduction 



The following GTP-C v2 messages support path management for the Sv interface: 

Echo Request 

Echo Response 

Version Not Supported 

These messages are defined for GTP-Cv2 and the handling and definition shall also be as defined in GTP-Cv2, see 
3GPPTS 29.274 [3]. 

5.3.2 Echo Request message 

3GPP TS 29.274 [6] specifies the information elements included in the Echo Request message. 

5.3.3 Echo Response message 

3GPP TS 29.274 [3] specifies the information elements included in the Echo Response message. 

5.3.4 Version Not Supported message 

3GPP TS 29.274 [3] specifies the detailed handling and information elements included in the Version Not Supported 

message. 
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5.4 Reliable Delivery of Signalling Messages 

This is performed as according to GTPv2 in 3GPP TS 29.274 [3]. 

5.5 Error Handling 

This is performed as according to GTPv2 in 3GPP TS 29.274 [3]. 

5.6 Restoration and Recovery 

This is performed as according to GTPv2 in 3GPP TS 23.007 [5]. 



Sv Information Elements 



6.1 



General 



IE type value used in Sv Message is defined in TS 29.274 [3]. The IE format is coded as per GTP in TS 29.274 [3]. 

Table 6.1 shows the IEs used for SRVCC. Within information elements, certain fields may be described as spare. These 
bits shall be transmitted with the value set to 0. To allow for future features, the receiver shall not evaluate these bits. 

Table 6.1-1 : Information Elements for SRVCC 



IE Type value 
(Decimal) 


Information elements 


Comment / Reference 





Reserved 


3GPP TS 29.274 [3] 


1 


International Mobile Subscriber Identity (IMSI) 


3GPP TS 29.274 [3] 


2 


Cause 


3GPP TS 29.274 [3] 


3 


Recovery (Restart Counter) 


3GPP TS 29.274 [3] 


4-50 


Reserved for S1 01 interface 


3GPP TS 29.274 [3] 


51 


STN-SR 


6.2 


52 


Source to Target Transparent Container 


6.3 


53 


Target to Source Transparent Container 


6.4 


54 


MM Context for E-UTRAN SRVCC 


6.5 


55 


MM Context for UTRAN SRVCC 


6.6 


56 


SRVCC Cause 


6.7 


57 


Target RNC ID 


6.8 


58 


Target Global Cell ID 


6.9 


59 


TEID-C 


6.10 


60-70 


For future Sv interface use 


- 


71-73 


Reserved for GTPv2 


3GPP TS 29.274 [3] 


74 


IP Address 


3GPP TS 29.274 [3] 


75 


Mobile Equipment Identity (MEI) 


3GPP TS 29.274 [3] 


76 


MSISDN 


3GPP TS 29.274 [3] 


77-254 


Reserved for GTPv2 


3GPP TS 29.274 [3] 


255 


Private Extension 


3GPP TS 29.274 [3] 



6.2 



STN-SR 



STN-SR is transferred via GTP tunnels. The sending entity copies the value part of the STN-SR into the Value field of 
the STN-SR IE. STN-SR is defined in 3GPP TS 23.003 [4]. 
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Octets 

1 
2 to 3 

4 
5 to (n+4) 


Bits 
8 7 6 5 4 3 2 


1 




Type = 51 (decimal) 




Length = n 


Spare Instance 


STN-SR 



Figure 6.2-1: STN-SR 



6.3 Source to Target Transparent Container 

The Source to Target Transparent Container contains RAN/BSS parameters that are necessary for the target radio 
access network to setup radio bearer. When target network is GERAN, this container carries the Old BSS to New BSS 
Information IE defined in 3GPP TS 48.008 [8]. When target network is UTRAN, this container carries the Source RNC 
to Target RNC Transparent Container IE defined in 3GPP TS 25.413 [9]. The Transparent container field includes the 
IE value part as it is specified in the respective specification. 

The receiver of this Information Element shall ignore the length of the transparent container encoded in octet 5 and shall 
derive the actual length of the container from the length encoded in octets 2 to 3 minus 1 . 

For backward compatibility, the sender of this Information Element shall set the octet 5 to the actual length of the 
transparent container if the size of the container is smaller or equal to 255 octets, and to the value "255" otherwise. 



Octets 

1 

2 to 3 

4 

5 


Bits 
8 7 6 5 4 3 2 


1 




Type = 52 (decimal) 




Length = n (decimal) 


Spare Instance 


Length of the Transparent container 


6 to (n+3) 


Transparent container 





Figure 6.3-1 : Source to Target Transparent Container 



6.4 Target to Source Transparent Container 

The Transparent container field includes the IE value part as it is specified in the respective specification. 

The receiver of this Information Element shall ignore the length of the transparent container encoded in octet 5 and shall 
derive the actual length of the container from the length encoded in octets 2 to 3 minus 1 . 

For backward compatibility, the sender of this Information Element shall set the octet 5 to the actual length of the 
transparent container if the size of the container is smaller or equal to 255 octets, and to the value "255" otherwise. 



Octets 

1 

2 to 3 

4 

5 

6 to (n+4) 


Bits 
8 7 6 5 4 3 2 


1 




Type = 53 (decimal) 




Length = n 


Spare ] Instance 


Length of the Transparent container 


Transparent container 





Figure 6.4-1 : Target to Source Transparent Container 



6.5 



MM Context for E-UTRAN SRVCC 



The MM Context information element contains mobile station classmarks, supported codec list, and the security 
parameters that are necessary for the MSC server to setup the ciphering connection (and integrity protection for 3G) 
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with the target access for SRVCC. CS ciphering keys parameters: CK SRVC c. IK SRV cc, and eK SI for E-UTRAN SRVCC 
are defined in 3GPP TS 33.401 [6]. 

Mobile Station Classmark 2, Mobile Station Classmark 3, and Supported Codec List information Elements indicate the 
supported encryption algorithms for GERAN access and CS supported codecs. The coding of Mobile Station 
Classmarks and Supported Codec List fields include the IE value part as it is specified in 3GPP TS 24.008 [7]. 

eKSI shall be coded as bits 1 to 3 of the NAS Key Set Identifier IE in TS 24.301 [12]. 



Octets 

1 
2 to 3 

4 

5 
6 to 21 
22 to 37 

38 
39 to a 

b 
(b+1)toc 

d 

(d+1) to 

(n+4) 


Bits 
8 7 6 5 4 3 2 1 




Type = 54 (decimal) 




Length = n 


Spare Instance 


Spare | eKSI 


CKsrvcc 


IKsrvcc 




Length of the Mobile Station Classmark 2 




Mobile Station Classmark 2 




Length of the Mobile Station Classmark 3 




Mobile Station Classmark 3 




Length of the Supported Codec List 




Supported Codec List 





Figure 6.5-1 : MM Context for E-UTRAN SRVCC 



6.6 



MM Context for UTRAN SRVCC 



The MM Context information element contains mobile station classmarks, supported codec list, and the security 
parameters that are necessary for the MSC server to setup the ciphering connection (and integrity protection for 3G) 
with the target access for SRVCC. The usage of CK" CS , IK" CS , KSI" CS , Kc", CKSN" CS are defined in 3GPP TS 33.102 
[10]. 

Mobile Station Classmark 2, Mobile Station Classmark 3, and Supported Codec List information Elements indicate the 
supported encryption algorithms for GERAN access and CS supported codecs. The coding of Mobile Station 
Classmarks and Supported Codec List fields include the IE value part as it is specified in 3GPP TS 24.008 [7]. 

CKSN' CS shall be coded as bits 1 to 8 of the CKSN IE in TS 24.008 [7]. The KSI'cs shall be coded as bits 1 to 4 of the 
CKSN IE in TS 24.008 [7]. 

The source SGSN will send to the MSC Server enhanced for SRVCC either the KSr C s/CK'cs/IK' cs for an UMTS 
subscriber or the CKSN' CS /Kc' for a GSM subscriber (see 3GPP TS 33.102 [10]): 

when transferring KSr C s/CK' cs /IK' cs , the source SGSN shall set the key sequence value of the CKSN' CS to the 
value '111' and Kc" to all 0"s in binary; 

when transferring CKSN' CS /Kc', the source SGSN shall set the key sequence value of the KSI" CS to the value 
'1 1 1', and CK" CS and IK" CS to all 0"s in binary. 
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Octets 

1 
2 to 3 

4 

5 
6 to 21 
22 to 37 
38 to 45 

46 

47 
48 to a 

b 
(b+1)toc 

d 

(d+1) to 

(n+4) 


Bits 
8 7 6 5 4 3 2 1 




Type = 55 (decimal) 




Length = n 


Spare 


Instance 


Spare 


KSI"cs 


CK"cs 


IK"cs 




Kc" 




CKSN" CS 




Length of the Mobile Station Classmark 2 




Mobile Station Classmark 2 




Length of the Mobile Station Classmark 3 




Mobile Station Classmark 3 




Length of the Supported Codec List 




Supported Codec List 





Figure 6.6-1 : MM Context for UTRAN SRVCC 



6.7 



SRVCC Cause 



SRVCC Cause IE is coded as this is depicted in Figure 6.7-1. 



Octets 

1 

2 to 3 

4 

5 


Bits 
8 7 6 5 4 3 2 


1 




Type = 56 (decimal) 




Length = 1 


Spare Instance 


SRVCC Cause value 



Figure 6.7-1 : SRVCC Cause 

The SRVCC Cause value indicates the reason for cancellation or the rejection of the SRVCC PS to CS Request. 

Table 6.7-1 : SRVCC Cause values 



Cause value 
(decimal) 


Meaning 





Reserved. Shall not be sent and if received the Cause shall be treated as an 
invalid IE 


1 


Unspecified 


2 


Handover/Relocation cancelled by source system 


3 


Handover /Relocation Failure with Target system 


4 


Handover/Relocation Target not allowed 


5 


Unknown Target ID 


6 


Target Cell not available 


7 


No Radio Resources Available in Target Cell 


8 


Failure in Radio Interface Procedure 


9-255 


Spare. This value range is reserved for SRVCC Cause values 



6.8 Target RNC ID 



This IE shall contain the identity of the target RNC. The encoding of this IE is defined in 3GPP TS 29.002 [11]. 



Octets 

1 

2 to 3 

4 

5 to (n+4) 


Bits 
8 7 6 5 4 3 2 


1 




Type = 57 (decimal) 




Length = n (decimal) 


Spare Instance 


RNC ID 



Figure 6.8-1 : Target RNC ID 
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6.9 Target Global Cell ID 



This IE shall contain the identity of the target GSM Cell ID. The encoding of this IE is defined in 3GPP TS 29.002 [11]. 



Octets 

1 

2 to 3 

4 

5 to (n+4) 


Bits 
8 7 6 5 4 3 2 


1 




Type = 58 (decimal) 




Length = n (decimal) 


Spare |~ Instance 


Cell ID 



Figure 6.9-1 : Target Cell ID 



6.10 Tunnel Endpoint Identifier for Control Plane (TEID-C) 

Tunnel Endpoint Identifier for Control Plane (TEID-C) is coded as depicted in Figure 6.x- 1. 



Octets 


Bits 
8 7 6 5 4 3 2 1 




1 
2-3 

4 
5-8 


Type = 59 (decimal) 




Length = 4 (decimal) 


Spare Instance 


Tunnel Endpoint Identifier for Control Plane (TEID-C) 


9-(n+4) 


These octet(s) is/are present only if explicitly specified 





Figure 6.10-1 : Tunnel Endpoint Identifier for Control Plane (TEID-C) 
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